$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: mfCEq94LoD1+cJ4ssb1LFHD8iBR6g2FlYJudmDrj2a8= Subject key identifier: B6:EC:EA:5C:6E:4B:D5:7A:3E:23:1E:8E:A9:69:EE:0F:23:C7:E3:07 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 45F4AB2B8F14D856E18174881C5EB2D607BED43E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: 98 Signing time: Thu 05 Jun 2025 12:01:44 +0000 Manifest this update: Thu 05 Jun 2025 11:56:44 +0000 Manifest next update: Sun 08 Jun 2025 18:27:44 +0000 Files and hashes: 1: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: mnjvwa3OsSwTIWj5+iXLWa2Yq9NiCUov1Btpkjol1Rk=) 2: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: Hz/P540tQCAD7Joj9Cnl8/Cvk9mtd9SX29+QidTIXjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f4:ab:2b:8f:14:d8:56:e1:81:74:88:1c:5e:b2:d6:07:be:d4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Jun 5 11:56:44 2025 GMT Not After : Jun 8 18:27:44 2025 GMT Subject: CN=B6ECEA5C6E4BD57A3E231E8EA969EE0F23C7E307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:20:0a:df:88:55:27:fd:75:6c:23:3e:29: ee:41:34:ab:3f:d1:4e:ab:39:ba:d8:ab:df:35:1a: 7f:a0:c8:47:8c:97:1b:00:87:4f:cc:73:88:92:c0: d8:b4:0d:e0:18:ac:77:d9:bf:48:21:40:1a:0b:b4: b1:e8:f4:a7:36:4f:3d:11:aa:d8:41:6d:1e:72:61: 02:ea:59:94:7b:7b:e2:d3:de:44:95:ca:fa:33:aa: 79:a4:35:7d:b1:dd:13:7e:ad:93:6d:81:68:7f:5d: f0:07:24:f5:11:f1:55:00:88:b2:07:d0:0f:35:8f: 15:18:b2:db:2a:60:63:6b:ca:fe:8c:6f:20:fd:fe: d3:cb:fc:e6:52:c3:5d:e9:17:4c:f7:cd:e2:5a:4f: 56:54:ff:ca:8f:3b:8a:14:af:61:73:7d:d2:55:b4: dc:61:fd:44:9c:34:cd:74:7f:60:36:a3:ca:a8:67: cc:3e:60:90:be:ac:7b:10:0f:25:1a:a1:3a:c0:61: e8:cd:18:77:7e:a4:4c:f3:54:7a:6a:b1:5b:a3:eb: 9a:aa:92:2e:44:96:51:5a:14:94:9e:3f:c3:2d:46: 03:5c:f1:51:1c:57:c8:f2:11:84:ce:aa:28:53:a5: b1:97:56:0f:87:66:1e:09:03:af:9b:fa:2d:94:b2: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EC:EA:5C:6E:4B:D5:7A:3E:23:1E:8E:A9:69:EE:0F:23:C7:E3:07 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f0:e2:eb:cc:9c:fc:2b:a5:ce:aa:4e:c4:4e:83:27:1b:8a: c3:1c:f3:14:fb:cf:8c:4f:3a:23:53:20:4e:1b:bb:be:53:d3: 77:43:ce:56:2c:62:1b:87:fa:bc:b2:21:df:37:09:30:d4:36: 5f:ef:f8:62:b5:b5:63:53:b9:95:3a:d8:b8:54:51:c7:d5:b9: 21:a8:1b:ce:b5:43:27:00:a0:53:55:f5:9b:9e:b5:44:dd:52: fc:11:02:75:ab:1a:ec:11:cd:42:5e:db:dd:ae:a9:44:aa:52: b4:dd:bf:ca:e9:af:56:b4:b1:7d:f0:11:ac:69:65:8e:db:92: da:16:57:b8:66:7f:ee:d8:ce:a2:63:4a:ff:fc:71:00:f8:71: 56:c1:59:4c:62:f6:b8:9f:4e:67:a6:45:ca:8f:48:0d:66:68: 0e:f6:b3:31:92:93:36:fb:4b:6c:69:88:c3:cb:36:4c:09:2c: 10:44:1f:d0:fe:10:16:d0:a1:8c:86:62:06:a5:2a:03:f5:27: 43:d1:a5:02:a6:0a:31:30:ef:7a:14:6a:71:cc:80:ed:79:b9: 1a:44:07:67:1b:63:14:f3:56:ac:42:9b:b7:28:27:46:52:f1: 44:52:84:8d:7a:4e:9b:36:78:91:37:43:9d:71:75:44:b6:4e: 62:a8:11:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfSrK48U2FbhgXSIHF6y1ge+1D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTA2MDUxMTU2NDRaFw0yNTA2MDgxODI3NDRaMDMxMTAvBgNV BAMTKEI2RUNFQTVDNkU0QkQ1N0EzRTIzMUU4RUE5NjlFRTBGMjNDN0UzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi0iAK34hVJ/11bCM+Ke5BNKs/ 0U6rObrYq981Gn+gyEeMlxsAh0/Mc4iSwNi0DeAYrHfZv0ghQBoLtLHo9Kc2Tz0R qthBbR5yYQLqWZR7e+LT3kSVyvozqnmkNX2x3RN+rZNtgWh/XfAHJPUR8VUAiLIH 0A81jxUYstsqYGNryv6MbyD9/tPL/OZSw13pF0z3zeJaT1ZU/8qPO4oUr2FzfdJV tNxh/UScNM10f2A2o8qoZ8w+YJC+rHsQDyUaoTrAYejNGHd+pEzzVHpqsVuj65qq ki5EllFaFJSeP8MtRgNc8VEcV8jyEYTOqihTpbGXVg+HZh4JA6+b+i2Usu9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtuzqXG5L1Xo+Ix6OqWnuDyPH4wcwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLw4uvMnPwrpc6qTsROgycbisMc8xT7z4xP OiNTIE4bu75T03dDzlYsYhuH+ryyId83CTDUNl/v+GK1tWNTuZU62LhUUcfVuSGo G861QycAoFNV9ZuetUTdUvwRAnWrGuwRzUJe292uqUSqUrTdv8rpr1a0sX3wEaxp ZY7bktoWV7hmf+7YzqJjSv/8cQD4cVbBWUxi9rifTmemRcqPSA1maA72szGSkzb7 S2xpiMPLNkwJLBBEH9D+EBbQoYyGYgalKgP1J0PRpQKmCjEw73oUanHMgO15uRpE B2cbYxTzVqxCm7coJ0ZS8URShI16Tps2eJE3Q51xdUS2TmKoEc0= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:40 2025 by rpki-client